gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
GPO – Legal Notice/Forget Last User
Reading Time: 2 minutes Recently I came across a client that had an amazing legal notice before you logged into a computer. I also noticed that it didn’t remember who last logged in. This gave a unique level of security and provided a good AUL at the same time. I…
SHD Resource – User to Groups
Reading Time: 2 minutes This little guy is a simple dynamic parameter resource for you all. Take a look at my previous blog post about how these parameters work. Totally worth adding these things to your scripts. This script is simple, it uses the add-adgroupmemeber…
Multiple Dynamic Parameters
Reading Time: 4 minutes Dynamic parameters… OMG… Lets just say, when I first started using them, my brain melted. These things take so much effort to get going. Then the way to document them is even harder. After using PowerShell for many years, I finally figured…
